$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: cguqBS0YgPOQaqsRM/Ty8novQd84J9JMO2IIl+MDBz0= Subject key identifier: 6C:04:EE:DC:33:F0:BD:FC:60:7F:23:28:05:B3:9A:B2:D4:9A:DA:00 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 27C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 276C Signing time: Thu 18 Sep 2025 15:44:28 +0000 Manifest this update: Thu 18 Sep 2025 15:44:27 +0000 Manifest next update: Thu 25 Sep 2025 15:44:27 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: K8S1HCGA9xhM7AcqxO4tDyAiMcHw5/XKB9p/XTruD1w=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: H54eXqaAth/AANz7/DMFwtH0FIhN3UXJcrmsK7fhMXQ=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: oG5ygd/penwWyXmZZkzYKDAIiWuJVz9Qy2pJuzyaYxo=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: tAGi/sSZ9el7Z/s+1sNJT90gzy4cpKpqrErB6Bm68K0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: 4dAtwCU1fi5Bo6SCfNalDzxKHkBj/DREl9uromRy6Rs=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: SILTusquGoHpNsMBJynofIsPOUuJK+mXoArSIu6+szM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10177 (0x27c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Sep 18 15:44:27 2025 GMT Not After : Sep 25 15:44:27 2025 GMT Subject: CN=68cc28db-a1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:7f:4a:15:34:7f:4d:e7:a6:e3:de:89:b1: 63:7c:13:7e:a0:30:3f:76:70:f2:5f:c5:cb:47:3a: 68:8e:de:46:18:6b:2c:c0:7e:fb:99:80:56:20:76: 2d:2e:e8:0e:8a:98:71:7d:ca:40:c2:8c:d3:e1:8e: 82:e7:66:62:73:f9:e4:fe:a3:12:0f:ba:5c:b5:64: 88:5f:83:e9:12:fa:66:e5:d6:a9:78:d8:89:b4:e4: bc:99:20:49:ea:50:aa:93:32:ce:f0:10:de:76:d3: 2f:09:d7:73:78:e8:62:de:a3:f0:33:65:f7:a9:d4: 61:e9:7d:d4:23:5f:62:32:7b:d1:b0:e0:0c:ba:61: 62:2f:2e:bf:82:81:9d:df:cc:7e:67:a2:91:a6:6e: 74:73:c0:c4:4a:91:9e:da:70:d7:72:2d:e0:39:54: b3:10:f6:6b:6b:f8:06:cf:b6:f3:59:18:4f:9c:a2: b6:9b:dc:eb:cf:87:8f:3b:af:33:d1:24:c2:19:e1: b2:86:06:95:d8:1a:bd:8a:84:7a:49:ea:dd:da:19: 20:2e:a8:81:ad:b9:bd:c3:58:f1:56:50:63:b4:d6: d8:0d:6c:f0:17:8e:37:87:f4:44:35:0d:c1:11:2d: 15:23:1d:33:46:3e:1b:bd:22:e6:12:d8:94:6f:9d: b4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:04:EE:DC:33:F0:BD:FC:60:7F:23:28:05:B3:9A:B2:D4:9A:DA:00 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:e3:b4:e5:53:10:c1:07:55:51:fb:32:15:8e:46:2a:a4:23: ec:e2:ad:2b:f8:38:e5:4c:80:80:e1:36:e0:ca:34:38:fa:5b: d9:cb:4a:c6:7b:0f:b6:08:a5:48:59:f1:c2:dc:7a:4d:2a:44: 43:f1:71:1b:f8:2b:83:8f:65:83:f6:37:08:7f:7d:37:e9:c1: d1:08:6c:67:ba:a8:e6:b3:d0:10:96:06:97:ee:fe:d3:17:c6: 96:46:a2:bb:93:b1:11:df:7c:7d:23:72:75:9b:e2:3c:40:4f: 88:25:85:af:87:77:92:ed:cc:13:85:20:63:a2:c6:60:91:31: ba:29:c9:05:11:43:ae:c7:f3:a2:a4:2c:f0:d1:68:38:91:b6: cf:b0:83:b1:27:56:3b:ac:7e:dd:1f:f3:90:e0:2d:0c:28:c8: e4:59:f1:30:4f:e8:60:86:53:a1:52:45:e7:ea:45:3b:8d:d9: 0c:a5:5c:8c:5c:8c:06:36:92:01:b5:d3:b0:36:79:ee:4c:ea: 54:e1:dc:5c:70:fb:4c:95:2b:9b:08:1b:af:14:34:5a:0c:1e: 97:93:a2:82:79:96:c3:8c:fa:04:d6:7a:19:99:b9:6d:90:84: d3:27:35:fc:bd:fb:88:e4:68:5f:8f:1b:ce:02:e5:64:e1:cf: 49:98:01:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwOTE4MTU0NDI3WhcNMjUwOTI1MTU0NDI3WjAYMRYwFAYD VQQDEw02OGNjMjhkYi1hMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6B/ShU0f03npuPeibFjfBN+oDA/dnDyX8XLRzpojt5GGGsswH77mYBWIHYt LugOiphxfcpAwozT4Y6C52Zic/nk/qMSD7pctWSIX4PpEvpm5dapeNiJtOS8mSBJ 6lCqkzLO8BDedtMvCddzeOhi3qPwM2X3qdRh6X3UI19iMnvRsOAMumFiLy6/goGd 38x+Z6KRpm50c8DESpGe2nDXci3gOVSzEPZra/gGz7bzWRhPnKK2m9zrz4ePO68z 0STCGeGyhgaV2Bq9ioR6Serd2hkgLqiBrbm9w1jxVlBjtNbYDWzwF443h/RENQ3B ES0VIx0zRj4bvSLmEtiUb520uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwE7twz 8L38YH8jKAWzmrLUmtoAMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl47TlUxDBB1VR+zIVjkYqpCPs4q0r+DjlTICA4TbgyjQ4+lvZy0rG ew+2CKVIWfHC3HpNKkRD8XEb+CuDj2WD9jcIf3036cHRCGxnuqjms9AQlgaX7v7T F8aWRqK7k7ER33x9I3J1m+I8QE+IJYWvh3eS7cwThSBjosZgkTG6KckFEUOux/Oi pCzw0Wg4kbbPsIOxJ1Y7rH7dH/OQ4C0MKMjkWfEwT+hghlOhUkXn6kU7jdkMpVyM XIwGNpIBtdOwNnnuTOpU4dxccPtMlSubCBuvFDRaDB6Xk6KCeZbDjPoE1noZmblt kITTJzX8vfuI5GhfjxvOAuVk4c9JmAFo -----END CERTIFICATE-----Generated at Fri Sep 19 04:04:53 2025 by rpki-client